Security Engineer

Founding Internal Security Engineer | AI-native security company | Midtown Manhattan
A cybersecurity company building AI agents that detect, investigate, hunt and respond to threats at machine speed is hiring its first internal security engineer. It is one of the fastest-growing security companies of the last few years, with Fortune 500 and Global 2000 customers less than a year after launch. It is backed by some of the best-known operators in the industry, and the founders previously built detection and response products used by tens of thousands of customers.
At a security company, internal security isn’t a checkbox. Customers trust this team with their most sensitive telemetry, so the company’s own environment has to meet a higher bar than anyone else’s. You’ll set that bar.
What you’ll ownInternal security posture end to end: identity and access, endpoint, email, network and corporate cloudIdentity strategy across SSO, MFA, conditional access and privileged accessInternal threat hunting and incident response, from detection through containment, investigation and post-incident reviewVulnerability management, endpoint hardening and continuous monitoringSecurity policies, standards and documentation, built from zeroSOC 2 Type II and ISO 27001 work, customer security questionnaires, and vendor riskThe security-critical parts of IT, alongside an external IT provider. Day-to-day IT is light and transitional, with a dedicated IT hire planned.
What you’ll bring5+ years hands-on in security engineering or corporate security at a startup or scale-upA real threat hunting and detection backgroundIncident response experience you can walk through end to end, from investigation to resolution, not escalationExperience building a security program, policies and documentation from scratchDepth in at least one of IAM, endpoint, cloud or SaaS securityA builder’s mindset: comfortable with ambiguity, excited by zero-to-one, and genuinely interested in security and AI
Nice to have: SOC 2 or ISO 27001 audit experience, workflow automation, side projects, and experience with SIEM, XDR or detection and response tooling.
Why it’s worth itYou’ll build the internal security function at a security company, with your work held up against the product you’re protectingDirect access to the founders, high visibility across the company, and a team expected to grow around the functionDaily hands-on use of the company’s own AI security platformA strong cash and equity package at a company growing well ahead of plan
212 970